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UNITED STATES DISTRICT COURT 
EASTERN DISTRICT OF VIRGINIA 



JUL - 8 zm 



CLiLRK,ll,S. DISTRiCT COURT 
fdEUNDRIA.VIHGIKIA 



Alexandria Division 



UNITED STATES OF AMERICA 

V. 

ROBERT AUDUBON WFIITFIELD, 
Defendant. 



Criminal No. l:B-cr-383-6 
Hon. Liam O'Grady 



STATEMENT OF FACTS 
Tlie United States -md the defendant, Robert Audubon Whitfield, agree that had this 
matter proceeded to trial, the United States would have proven the following facts in the Eastern 
District of Virginia and elsewhere beyond a reasonable doubt, through witnesses, testimony, and 
other competent and admissible evidence: 

1. Between on or about September 16, 2010 and at least Januan,' 2, 201 1, individuals 
participated in a woridwide conspiracy as part of the online group ANONYMOUS in a campaign 
dubbed "OPERATION PAYBACK" (or "OPERATION: PAYBACK IS A BITCH,") to engage in 
a coordinated series of illegal cyber-attacks against victims. 

2. OPERATION PAYBACK targeted victims worldwide and in the Eastern District 
of Virginia, including dozens of governmental entities, trade associations, individuals, law firms, 
and financial institutions, which ANONYMOUS claimed opposed its stated philosophy of 
making all information free for all, including information protected by copyright laws or national 
security considerations. 

3. To carry out OPERATION PAYBACK, participants agreed to engage in an 
onslaught of cyber-attacks to damage and impair websites and computer systems by flooding 
those websites with a huge volume of irrelevant Internet traffic. This method of online attack 
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designed to shut down victim websites is known as a Distributed Denial of Service ("DDoS") 
attack. One of the stated goals of these DDoS attacks was to cause significant monetary and 
other damage to the victim targets, and members of ANONYMOUS coordinated the times and 
targets for the attacks through online announcements or in dedicated Internet Relay Chat 
channels, including the #command, #saveTPB, #savethepiratebay, and #operationpayback 
channels. OPERATION PAYBACK ultimately caused at least $8.9 million in damage and loss to 
United States-based victims. 

4. The weapon of choice used by participants in OPERATION PAYBACK included 
specifically-designed online weapons such as the Low Orbit Ion Cannon ("LOIC"), a 
downloadable network stress testing program, and similar programs including Java LOIC and 
hpingS. LOIC, for example, allowed participants individually to choose whether to attack in 
"Manual Mode (for pussies)" or as part of a group in "FUCKING HIVE MIND" mode. After 
picking the mode of attack and entering the target location, individuals could attack en masse by 
clicking a button labeled "IMMA CHARGIN MAH LAZER" to join in the cyber-assaults. 

5. Participants in OPERATION PAYBACK, including the defendant, engaged in 
illegal DDoS attacks during the conspiracy, including against the following victims: the Motion 
Picture Association of America; the Recording Industry Association of America; the British 
Phonographic Institute; the law firm ACS:Law; the trade association BREIN foundation; the 
Australian Federation Against Copyright Theft; the law firm Davenport Lyons; the Association 
of Commercial Audiovisual of Portugal; the private company Web Sheriff; the consulting firm 
DGLegal; the record label Ministry of Sound; the Spanish General Society of Authors and 
Publishers; the Spanish Ministry of Education, Culture, and Sport; the Spanish trade group 
Promusicae; the Federal Italian Music Industry; the International Federation of Phonographic 

Page 2 of 6 



* Case l:13-cr-00383-LO Document 310 Filed 07/08/14 Page 3 of 6 PagelD# 1984 



Industry; the directory of websites pro-music.it; the law firm Gallant MacMillan; Gene 
Simmons; the copyright licensing agency Access Copyright; the British Intellectual Property 
Office; the movie production company Satel Film; the Copyright Information and Anti-Piracy 
Centre in Finland; the U.S. Copyright Office of the Library of Congress; the intellectual property 
entity Hadopi; the Ireland National Federation against Copyright Theft; the Irish Recorded Music 
Association; the Fight Piracy Organization; the Intemational Federation of the Phonographic 
Industry; Warner Brothers; the payment services provider PostFinance; the Swedish Prosecutor's 
office; everydns.com; the law firm Borgstrom and Bodstrom; MasterCard; Visa; the online 
payment service Moneybookers.com; PayPal; the Recording Industry of South Africa; Amazon; 
the firm Arbor Networks; and Bank of America. 

6. In early November 2010, the defendant participated in the DDoS cyber-attack on 
the website of the U.S. Copyright Office of the Library of Congress, in concert with his co- 
conspirators, by flooding the website of the U.S. Copyright Office with requests in an effort to 
make the website inoperable. 

7. During an interview with law enforcement officers on January 27, 2011 , the 
defendant admitted his involvement in OPERATION PAYBACK and stated that he had installed 
the LOIC tool on his computer in about October 2010 for the purpose of joining and participating 
in DDoS attacks as part of OPERATION PAYBACK, and that he had been in IRC channels 
using the nickname "mightymooch." A forensic examination confirmed that the defendant had 
downloaded the LOIC tool onto his computer. 

8. Witness testimony, business records, and other evidence would further establish 
that beginning on or about September 16, 2010 and continuing up until January 2, 2011, 
participants of OPERATION PAYBACK, including DENNIS OWEN COLLINS, JEREMY 
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LEROY HELLER, ZHIWEI CHEN, JOSHUA S. PHY, RYAN RUSSELL GUBELE, ROBERT 
AUDUBON WHITFIELD, ANTHONY TADROS, GEOFFREY KENNETH COMMANDER, 
PHILLIP GARRETT SIMPSON, AUSTEN L. STAMM, TIMOTHY ROBERT McCLAIN, 
WADE CARL WILLIAMS, and THOMAS J. BELL, knowingly and intentionally conspired and 
agreed amongst themselves and together with others to commit an offense against the United 
States, that is, to knowingly cause the transmission of a program, information, code, and 
command, and, as a result of such conduct, intentionally cause damage, and attempt to cause 
damage, without authorization, to a protected computer. 

9. The statement of facts includes those facts necessary to support the defendant's 
guilty plea. It does not include each and every fact known to the defendant or to the 
government and it is not intended to be a full enumeration of all of the facts svirrounding the 
defendant's cases. 

1 0. The actions of the defendant, as recounted above, were in all respects knowing 
and intentional, and were not committed by mistake, accident or other innocent reason. 



Page 4 of 6 



Case l:13-cr-00383-LO Document 310 Filed 07/08/14 Page 5 of 6 PagelD# 1986 

11. The defendant and the United States agree that this statement of facts is 
admissible in any proceeding against defendant regardless of whether the plea agreement is 
presented to or accepted by a court. Moreover, the defendant waives any rights that he may have 
under Federal Rule of Evidence 410 regarding this statement of facts. 



Dana J. Boente 
United States Attorney 



By: 




Jay V. Prabhu 

Assistant United States Attorneys 



Richard D. Green 

Trial Attorney, U.S. Department of Justice 
Computer Crime & Intellectual Property Section 
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Defendant's Signature: After consulting with my attorney, I hereby stipulate that the above 
Statement of Facts is true and accurate, waive my rights under Federal Rule of Evidence 410 
related to this Statement of Facts, and agree that had the matter proceeded to trial, the United 
States would have proved the same beyond a reasonable doubt. 



Date: 



2014 




Robert Audubon Whitfield 
Defendant 



Defense Counsel Signature; I am Robert Audubon Whitfield's attorney. I have carefiilly 
reviewed the above Statement of Facts with him. To my knowledge, his decision to stipulate to 
these tacts is an informed and voluntary one. 

^^^-M ,2014 

^ ^ ElitaC.AmatKEsq. 



Esq. 

Counsel for the Defendant 
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